[Snyk] Fix for 1 vulnerabilities

[kiarza2543]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

⚠️ Warning

Failed to update the package-lock.json, please update manually before merging.

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	768/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5	Prototype Pollution SNYK-JS-LODASH-6139239	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: parse-server

The new version differs by 250 commits.

• 6f060e0 Release 4.3.0 (#6811)
• d698333 Optimizing pointer CLP query decoration done by DatabaseController#addPointerPermissions (#6747)
• 78239ac Merge pull request from GHSA-236h-rqv8-8q73
• f6ed506 Remove wontfix label from stalebot (#6810)
• ea1ec9b Update bug report template (#6805)
• 5e67e7d fix: upgrade @ graphql-tools/stitch from 6.0.10 to 6.0.11 (#6808)
• 85ec22c fix(direct-access): save context not present if direct access enabled (#6764)
• 2e708cc fix: upgrade @ graphql-tools/utils from 6.0.10 to 6.0.11 (#6809)
• 4f7fd17 chore(deps): bump lodash from 4.17.16 to 4.17.19 (#6807)
• 44015c3 Before Connect + Before Subscribe help required (#6793)
• 93a88c5 Add version to fix CDN (#6804)
• 3bd5684 Add idempotency (#6748)
• cbf9da5 Add production Google Auth Adapter instead of using the development url (#6734)
• 36bee12 fix: upgrade uuid from 8.1.0 to 8.2.0 (#6800)
• 1cc3211 fix: upgrade @ graphql-tools/stitch from 6.0.1 to 6.0.10 (#6798)
• fc8a668 fix: upgrade @ graphql-tools/utils from 6.0.1 to 6.0.10 (#6797)
• 142eaa7 Run Prettier JS [Snyk] Upgrade express from 4.11.2 to 4.18.2 #2 (#6796)
• e6a6354 Run Prettier JS (#6795)
• ebb0727 chore: replace bcrypt with @ node-rs/bcrypt (#6794)
• 0abe9bb Make clear description of anonymous user (#6655)
• 01b49b6 fix: upgrade follow-redirects from 1.11.0 to 1.12.1 (#6788)
• d5fbd50 fix: upgrade pg-promise from 10.5.6 to 10.5.7 (#6792)
• 33c1cdc fix: upgrade apollo-server-express from 2.14.1 to 2.15.0 (#6787)
• f8df89a fix: upgrade winston-daily-rotate-file from 4.4.2 to 4.5.0 (#6789)

See the full diff

Package name: string-similarity

The new version differs by 40 commits.

• 07cbc8d update readme
• 7ab3d72 update deps
• 4e10a7c Merge branch 'maxbachmann-patch-2'; simplify conditions
• eaeec5d formatting
• 34fa23f remove unrequired comparisions
• e63157a update deps
• f395495 Merge branch 'ludo97240-bugfix/ie_support'
• 106f312 Merge branch 'bugfix/ie_support' of https://github.com/ludo97240/string-similarity into ludo97240-bugfix/ie_support
• e09e465 update dependencies to latest
• 1044eb7 Update index.js
• f83ba3c readme changes
• 68da344 using umd (#45)
• 0e73321 Merge pull request #39 from aceakash/3.0.1-rc
• 4e748c8 readme
• 814bd82 updated jasmine version
• 4325a54 Merge branch 'AScriver-master' into 3.0.1-rc
• ebd8f50 Merge branch 'master' of https://github.com/AScriver/string-similarity into AScriver-master
• 7ac740b Merge branch 'f-a-r-a-z-patch-2' into 3.0.1-rc
• ddd3c17 Refactor compare-strings.js
• 8c241e5 Merge branch 'dependabot/npm_and_yarn/jasmine-3.4.0' into 3.0.1-rc
• 351caa1 Bump jasmine from 3.3.1 to 3.4.0
• 69ecf81 Merge pull request [Snyk] Fix for 1 vulnerabilities #21 from aceakash/dependabot/npm_and_yarn/jasmine-3.3.1
• f09e9e9 Changed legacy function substr() to substring()
• 2718c82 Changed legacy function substr() to substring()

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution